Senior IT Auditor

Navy Federal Credit Union; Vienna (VA); On-site; USD 90,000 - 120,000; Full time

Job summary

Navy Federal Credit Union is seeking an experienced IT Audit professional to plan and execute IT and integrated audits. You will analyze the organization’s technology infrastructure to ensure secure, compliant operations and act as Auditor-In-Charge on audits when needed.

Responsibilities include developing risk-based objectives, coordinating evidence collection, leveraging data analytics, and mentoring staff. A Bachelor’s degree with 5+ years in IT audit is required; Master’s is a plus.

Qualifications

• Minimum five years of experience in IT audit or related tech assurance functions.
• Advanced knowledge of IT Risk, General Controls and infrastructure controls.
• Experience leading IT/integrated audits and supervising staff.
• Strong interpersonal and communication skills with stakeholders.
• Proven ability to present findings and recommendations clearly.
• Ability to manage multiple priorities independently in a team.
• Collaborates across organizational boundaries to drive improvements.
• Influence, negotiate, and persuade to reach outcomes.
• Excellent organizational, planning and time management skills.
• Strong word processing and spreadsheet software skills.
• Advanced critical thinking, analytical and problem-solving abilities.
• Bachelor's degree or equivalent in combination with experience.

Responsibilities

• Contribute toward planning and execution of IT and integrated audits following standards.
• Analyze Navy Federal's tech infrastructure for secure, compliant operations.
• Plan and execute IT system audits ensuring confidentiality, availability and integrity.
• Develop risk-based audit objectives, scopes, and test plans; act as Auditor-In-Charge when needed.
• Coordinate with defense lines to obtain audit evidence for testing.
• Identify opportunities to leverage data analytics and technology for risk coverage.
• Manage multiple audits concurrently and document testing results.
• Review audit evidence and determine design and operating effectiveness of controls.
• Provide risk-based recommendations to enhance internal controls.
• Prepare workpapers and collaborate with departments to improve processes.
• Assist in remediation and contribute to high-quality audit reports.
• Mentor junior staff and lead project timelines and communications.
• Stay current with regulatory and industry trends affecting NFCU.

Skills

IT Audit Experience

Information Security

Communication Skills

Analytical Skills

Time Management

Education

Bachelor's degree or equivalent

Master's degree

Job description

Overview

Navy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.

Navy Federal's Internal Audit team is undergoing a transformational journey to become a best-in-class Audit function. Our vision is to be a trusted advisor to the business by delivering high-quality, risk-focused audit and advisory work, leveraging technology, integrating data analytics into our work, and investing in our people. If this sounds like the type of team you’d like to be part of, we want to learn more about you.

To contribute to the planning and execution of complex IT, information security, technology infrastructure, and integrated audits. May act as an Auditor-In-Charge on audits and will participate in Internal Audit initiatives. Build partnerships, trust, and accountability within the organization and deepen relationships with audit stakeholders.

Responsibilities

• Contribute toward the planning and execution of IT and/or integrated audits in accordance with Navy Federal and industry audit standards
• Analyze and assess Navy Federal's technological infrastructure to ensure processes and systems run accurately and efficiently, while remaining secure and meeting compliance regulations
• Plan and execute audits of the organization's IT systems to ensure confidentiality, availability and integrity of systems and processes
• Develop risk-based audit objectives, scopes, and test plans to ensure NFCU's IT systems and infrastructure are compliant with regulations, requirements, policies, and standards. Occasionally act as Auditor-In-Charge on IT/integrated audits of lesser risk/complexity, providing guidance, coaching, and direction to Internal Audit staff regarding Navy Federal practices and industry standards
• Coordinate with points of contact and first/second lines of defense to conduct preliminary research, lead process walkthroughs, document process narratives and workflows, identify key risks and controls, and obtain audit evidence for testing
• Identify opportunities to leverage data analytics and technology to drive deeper risk coverage and insights to business partners
• Work across multiple audits concurrently. Apply critical thinking skills by seeking to understand and execute assigned control testing and document results according to professional and internal standards
• Independently review and analyze audit evidence and results of testing to determine design and operating effectiveness of controls
• Identify and quantify issues and provide risk-based recommendations to implement and enhance internal controls to management in a timely manner
• Prepare audit workpapers to document relevant information obtained, analyzed, and evaluated that support audit observations/issues and conclusions
• Work collaboratively with other departments and stakeholders to provide insights and recommendations for improvement
• Partner with business areas to ensure adequate remediation plans are developed and implemented
• Contribute toward the development of high-quality, well-written, and timely audit reports for senior management, the President/CEO, and the Supervisory Committee
• When asked to operate as an Auditor-In-Charge, review work papers prepared by internal auditors assigned to audits and provide coaching and mentoring
• Manage audit timelines to ensure the timely reporting of identified risks and issues; report delays and issues in overall audit to management and lead resolution of audit project issues
• Participate in Internal Audit strategic initiatives and act as a champion of change and continuous improvement
• Stay abreast of and ensure compliance with applicable federal, state and industry laws, regulations, and guidelines
• Actively monitor and stay current with evolving industry trends, technology, and emerging risks that may impact the company
• Perform other duties as assigned

Qualifications

• Minimum five years of experience in IT audit, information security, technology risk management, or related technology assurance functions, with hands-on experience performing technology infrastructure and cybersecurity audits
• Advanced knowledge of IT Risk, General Controls, technology infrastructure controls, Information Security Frameworks and best practices
• Advanced knowledge of technology and financial systems risk assessments and documentation, including infrastructure components such as networks, operating systems, cloud environments, and security tooling
• Experience leading IT/integrated audits and/or overseeing other audit staff in the execution of audit work
• Advanced interpersonal and communication skills, including experience working with all levels of staff, management, stakeholders, and vendors
• Significant experience in presenting findings, conclusions, alternatives, and information clearly and concisely
• Advanced skill in managing multiple priorities independently and operate well in a team environment to achieve goals
• Advanced skill in collaborating across organizational boundaries and building partnerships across various functions
• Advanced skill to influence, negotiate & persuade to reach agreeable exchange & positive outcomes
• Advanced organizational, planning and time management skills
• Advanced word processing and spreadsheet software skills
• Advanced critical thinking, analytical, and problem-solving skills
• Bachelor's degree or the equivalent combination of experience, education, and training

Desired Qualifications

• Experience with credit union financials and/or regulations
• Working Knowledge of NFCU products, services, programs, policies, and procedures
• IT Certifications - CISA, CRISC, CISSP or GIAC Security Essentials (GSEC) Certification
• Master's degree in Computer Science, Information Technology, or related field
• Demonstrated experience performing end-to-end audit work in complex technology environments, including risk assessment, scope and test-plan development, walkthroughs, technical evidence evaluation, control design and operating-effectiveness testing, issue development, and reporting
• Demonstrated experience scoping and executing risk-based technology infrastructure or cybersecurity audits beyond standardized SOX, ITGC, compliance, or checklist-based testing
• Demonstrated experience auditing technology infrastructure and information security areas, such as networks, firewalls, operating systems, cloud platforms, identity and access management, logging and monitoring, and incident response

Additional Information

• Hours: Monday - Friday, 8:00AM - 4:30PM

Location

• 820 Follin Lane, Vienna, VA 22180
• 5510 Heritage Oaks Drive, Pensacola, FL 32526

Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.

Accommodations: If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process), you can contact Navy Federal\'s Medical Accommodations team at [e-mail] or by calling 1-888-503-6013. This team cannot provide any information on job postings or application status.